Is it FP?

[Guermant]

IObit Security 360

 

OS:Windows XP

Version:1.0.1.30

Define Version:1203

Time Elapsed:00:06:12

Objects Scanned:66501

Threats Found:1

 

|Name|Type|Description|ID|

Backdoor.MatrixSS, File, D:\WINDOWS\system32\cliconfg.exe, 9-81990

 

Virustotal results 0/41 http://www.virustotal.com/ru/analisis/915a83a3984083724ae6630ee2b28284b1a83073fb6cf7c07c9043637efa26ea-1254747783

 

Is it FP?

[solbjerg]

Hi Guermant

That result is curious!!

I just saw that Symantec had this to say about it:

SecurityRisk.MatrixSS drops various files on the computer. If these files are executed, they will install other adware programs.

Perhaps check again - try another site!

Cheers

solbjerg

 

 

IObit Security 360

 

OS:Windows XP

Version:1.0.1.30

Define Version:1203

Time Elapsed:00:06:12

Objects Scanned:66501

Threats Found:1

 

|Name|Type|Description|ID|

Backdoor.MatrixSS, File, D:\WINDOWS\system32\cliconfg.exe, 9-81990

 

Virustotal results 0/41 http://www.virustotal.com/ru/analisis/915a83a3984083724ae6630ee2b28284b1a83073fb6cf7c07c9043637efa26ea-1254747783

 

Is it FP?

[Guermant]

I tried some another sites - nothing found.

 

I've attached this file here. cliconfg.zip

[solbjerg]

Hi Guermant

Based on these reports I would get rid of it.

http://www.bleepingcomputer.com/startups/CLICONFG-840.html

http://www.threatexpert.com/files/cliconfg.exe.html

Cheers

solbjerg

 

I tried some another sites - nothing found.

 

I've attached this file here. [ATTACH]2002[/ATTACH]

[LagerX]

Upload it to camas.comodo.com and post results page :)

 

Seems like it might be a new malware, or it is false positive (I don't think so)

[Guermant]

hi,

 

camas.comodo.com result http://camas.comodo.com/cgi-bin/submit?file=915a83a3984083724ae6630ee2b28284b1a83073fb6cf7c07c9043637efa26ea

 

threatexpert result http://www.threatexpert.com/report.aspx?md5=d6a572f88d7595a5b6d4e7bc64ad2935

 

What do you think about it?

[LagerX]

Seems to be a part of Mysql or something.

Looks like it is FP indeed ^^

[itobe]

It almostly a Fp.

 

thanks for great help of all here.

 

in view of your and our investigation, it almostly a fp.

 

had been solved in definitions version 1226.

 

thanks all. cheers.